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Art Unit: 2136 

DETAILED ACTION 
1. Claims 1-71 are presented for examination. 



Claim Rejections - 35 USC §102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(a) the invention was known or used by others in this country, or patented or described in a printed publication in this 
or a foreign country, before the invention thereof by the applicant for a patent. 

3. Claims 42^43, 45-46, 48-50, 52-53, 55-57, 61, 64-65, 70, and 72 are rejected under 35 
U,S.C. 102(a) as being anticipated by Kori (Patent No,: US 2001/0053979 Al). 

As per claim 42, Kori teaches a method for accessing material, comprising: 

decrypting a secure registry with a registry key (Kori Fig, 13, and page 5 par. 0082); 
retrieving another key from said decrypted secure registry (Kori Fig. 1 3, and page 5 par. 

0082); and 

decrypting encrypted material using said another key to access said material (Kori Fig. 
13, and page 5 par. 0082). 

As per claim 43, Kori teaches the method, further comprising receiving said encrypted material 
as streaming media (Kori page 2 par. 0028, page 5 par. 0082, and par. [0086-0088]). 
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As per claim 45, Kori teaches the method, wherein said decrypting encrypted material using said 
another key to access said material, comprises: 

decrypting said at least one content key with said another key (Kori page 5 par, 0082); 

and 

decrypting said encrypted material with said at least one content key to access said 
material (Kori page 5 par. 0082). 

As per claims 46, and 53, Kori teaches the method, wherein said another key comprises at least 
one license key corresponding to a license to use said material (Kori fig. 1 1 : encrypting key). 

As per claims 48, and 55, Kori teaches the method, wherein said another key comprises a private 
key of said recipient of said material (Kori page 5 par. 0081-0082). 

As per claims 49 and 56, Kori teaches the method, wherein said decrypting encrypted material 
using said another key to access said material, comprises: 

decrypting said at least one content key with said private key (kori page 5 par. 0081- 
0082); and 

decrypting said encrypted material with said at least one content key to access said 
material (kori page 5 par. 0081-0082). 

As per claim 50, Kori teaches the method, further comprising receiving said encrypted material 
as a file (Kori page 5 par. 0086-0088). 
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As per claim 52, Kori teaches the method, wherein said decrypting encrypted material using said 
another key to access said material, comprises: 

decrypting said at least one content key with said another key (Kori page 5 par, 0081- 
0082); and 

decrypting said encrypted material with said at least one content key to access said 
material (Kori page 5 par. 0081-0082). 

As per claim 57, Kori teaches the method, further comprising retrieving said registry key from a 
replaceable software module (Kori fig. 8 No. 1 1). 

As per claim 61, Kori teaches the method, further comprising retrieving said registry key from 
binary executable codie of a control module (Kori fig, 8, No. 11). 

As per claim 64, Kori teaches the method, wherein said reference entity identification is 
integrated into said binary executable code of said control module along with said registry key 
(Kori page 5 par. 0081-0082). 

As per claim 65, Kori teaches the method, further comprising generating said registry key using 
a sensed entity identification (Kori fig. 8 No. 11; generating encrypting key using a sensed 
password). 
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As per claim 70, Kori teaches the method, wherein said input device is a keyboard (Kori page 2 
par. 0028, and fig. 3a & 3b). 

As per claim 72, Kori teaches the method, further comprising after said decrypted encrypted 
material using said another key to access said material: 

using said material according to a license stored in said secure registry along with said 
another key (Kori page 5 par. 0081-0082). 

Claim Rejections - 35 USC§103 

4. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

5. Claims 1-41, 44, 47, 51, 54, 58-60, 62-63, 66-69, and 71 are rejected under 35 U,S.C. 
103(a) as being unpatentable over Kori (Patent No.: US 2001/0053979 Al) in view of Novak 
(Pub. No.: US 2003/0097655 Al). 

As per claim 1, Kori teaches an apparatus for accessing material, comprising: 

a secure registry encrypted with a registry key (Kori page 2 par. 0034, fig. 3A5 and fig. 
1 1 ; encrypted copyright information) and storing another key useful for decrypting material 
(Kori Fig. 1 1 ; encrypting key); and 
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a control module configured to decrypt said secure registry using said registry key for 
retrieval of said another key (Kori Fig. 13, and page 5 par. 0082). 

Kori does not explicitly teach user verification or decrypting if a correct entity 
identification is received. 

However Novak discloses authenticating a user identity to decrypt an access key using a 
license key and decrypting digital content using the decrypted access key (Novak page 10 par. 
[0144-0147], page 1 par. 0124, page 8 par. 01 12, and fig. 1 1). 

Therefore it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to employ the teachings of Novak within the system of Kori 
because it would enhance security by comparing a unique user identity or a unique serial number 
of a device with the previously stored to verify a user or a device (Novak page 10 par. [0144- 
0147], and fig. 7). 

As per claims 2 and 7, Kori and Novak teach all the subject matter as described above. In 
addition, Kori teaches the apparatus, wherein said control module receives said material as 
streaming media, and is further configured to decrypt said material using said another key (Kori 
page 2 par. 0028, page 5 par. 0082, and par. [0086-0088]). 

As per claims 3, 8, and 51 Kori and Novak teach all the subject matter as described above. The 
apparatus, wherein said streaming media/file is in MPEG-4 format encrypted with at least one 



Application/Control Number: 1 0/036, 1 28 Page 7 

Art Unit: 2136 

content key, and said control module receives said at least one content key encrypted with said 
another key (Novak page 4 par, [0058-0059], and fig. 1 1 No. 1 108). The rational for combing are 
the same as claim 1 above. 

As per claims 4, 9, and 44, Kori and Novak teach all the subject matter as described above. The 
apparatus, wherein said another key comprises at least one license key corresponding to a license 
to use said material (Kori fig. 1 1 ; encrypting key and Novak fig. 4 No. 412). The rational for 
combining are the same as claim 1 above. 

As per claims 5, 10, 47, and 54 Kori and Novak teach all the subject matter as described above. 
In addition, Kori teaches the apparatus, wherein said streaming media/file is in MPEG-4 format 
encrypted with at least one content key, and said control module receives said at least one 
content key encrypted with a public key of said apparatus (Kori page 5 par. 008 1 ). 

As per claims 6 and 1 1, Kori and Novak teach all the subject matter as described above. The 
apparatus, wherein said another key comprises a private key of said apparatus (Kori page 5 par. 
[0080-0081], and Novak page 6 par. 0096). The rational for combining are the same as claim 1 
above. 

As per claim 12 Kori and Novak teach all the subject matter as described above. In addition, 
Kori teaches the apparatus, wherein said control module includes a control program and a 
replaceable software module linked to said control program so as to provide said registry key to 
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As per claim 1 3 Kori and Novak teach all the subject matter as described above. In addition Kori 
teaches the apparatus, wherein said replaceable software module is a dynamic link library 
module (Kori page 10 par. 0144; the authentication module is called/separately downloaded 
when authentication is requested by a user). 

As per claim 14, Kori and Novak teach all the subject matter as described above. In addition, 
Kori teaches the apparatus, wherein said replaceable software module provides both a new and 
old registry key to said control program so that said control program can decrypt said secure 
registry with said old registry key, encrypt said decrypted secure registry with said new registry 
key, and replace said secure registry encrypted with said old registry key with said secure 
registry encrypted with said new registry key (Kori fig. 8 No. 1 1, and page 5 par. 0081-0082). 

As per claim 1 5, Kori and Novak teach all the subject matter as described above. In addition, 
Kori teaches the apparatus, wherein said replaceable software module has been provided by and 
linked to said control program by a server (Kori page 2 par. 0028, fig. 1 1 , and Novak page 8 par. 
0113). 

As per claim 16, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said registry key is integrated into a binary executable 
code of said control module (Novak page 8 par. [01 16-0117]). The rational for combining are the 
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As per claim 17, Kori and Novak teach all the subject matter as described above. In addition, 
Kori teaches the apparatus, wherein a server has provided said control program to said apparatus 
(Kori page 2 par. 0028 and fig. 1 1). 

As per claim 18, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said control module includes a registry key generator that 
generates said registry key using a sensed entity identification (Novak page 10 par. [0144-0147], 
page 1 par. 0124, page 8 par. 0112, and fig. 11). The rational for combining ai^e the same as 
claim 1 above. 

As per claims 19 and 23, Kori and Novak teach all the subject matter as described above. In 
addition, Novak teaches the apparatus, wherein said sensed entity identification is unique for said 
apparatus (Novak page 10 par. [0144-0147], page 3 par. 0049, and page 8 par. 0112). 

As per claims 20 and 67, Kori and Novak teach all the subject matter as described above. In 
addition, Novak teaches the apparatus, wherein said sensed entity identification is unique for a 
hardware device connectable to said apparatus (Novak page 10 par. [0144-0147], page 3 par. 
0047 & 0049, and page 8 par. 0112). The rational for combining is the same as claim 1 above. 

As per claims 21 , 30, and 68, Kori and Novak teach all the subject matter as described above. In 
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addition, Novak teaches the apparatus, wherein said sensed entity identification is unique for a 
user of said apparatus (Novak page 8 par. 0112). The rational for combining is the same as claim 
1 above. 

As per claim 22, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said control module includes a comparison module that 
determines whether said correct entity identification has been received by comparing a reference 
entity identification against a sensed entity identification (Novak page 10 par. [0144-0147], page 
1 par. 0124, page 8 par. 0112, and fig. 1 1). The rational for combining is the same as claim 1 
above. 

As per claim 24, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said sensed entity identification is a computer 
identification (Novak page 3 par. 0047 and 0049). The rational for combining is the same as 
claim 1 above. 

As per claim 25, Kori and Novak teach ail the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said sensed entity identification is a network interface card 
identification (Novak page 3 par. 0049, and page 7 par. 0103). The rational for combining are the 
same as claim 1 above. 

As per claim 26, Kori and Novak teach all the subject matter as described above. In addition, 
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Novak teaches the apparatus, wherein said sensed entity identification is a hai-d disk drive 
identification (Novak page 3 par. 0049, page 5 par. 0077, and page 7 par. 0103). The rational for 
combining are the same as claim 1 above. 

As per claim 27, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said sensed entity identification is unique for a hardware 
device connectable to said apparatus (Novak page 3 par, 0049, and page 7 par. 0103). The 
rational for combining are the same as claim 1 above. 

As per claim 28, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said sensed entity identification is a smartcard 
identification (Novak page 7 par. 0103). The rational for combining are the same as claim 1 
above. 

As per claim 29, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said sensed entity identification is a content storage unit 
identification (Novak page 3 par. 0049, and page 7 par. 0103). The rational for combining are the 
same as claim 1 above. 

As per claim 31, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said sensed entity identification is a credit card number 
(Novak page 3 par. 0049, and page 7 par. 0103). The rational for combining are the same as 
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As per claim 32, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said sensed entity identification is a predefined user 
identification (Novak page 10 par, [0144-0147], page 1 par. 0124, page 8 par, 01 12, and fig. 1 1). 
The rational for combining are the same as claim 1 above. 

As per claims 33 and 71, Kori and Novak teach all the subject matter as described above. In 
addition, Novak teaches the apparatus, wherein said sensed entity identification is a biometrics 
based identification (Novak page 7 par. 103 and page 6 par. 0089). The rational for combining 
are tlie same as claim 1 above. 

As per claim 34, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said biometrics based identification is a fingerprint of said 
user of said apparatus (Novak page 7 par, 1 03 and page 6 par. 0089). The rational for combining 
are the same as claim 1 above. 

As per claim 35, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said biometrics based identification is a speech of said 
user of said apparatus (Novak page 7 par. 103 and page 6 par. 0089; it would have been obvious 
to one ordinary skill in the art at the time of the invention to modify Novak's fingerprint 
biometric to speech because speech biometric was well known at the time of the invention was 
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made). The rational for combining are the same as claim 1 above. 

As per claim 36, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein a remote server determines whether said con^ect entity 
identification is received (Novak page 1 par. 0024, and fig. 6). The rational for combining are the 
same as claim 1 above. 

As per claim 37, Kori and Novak teach all the subject matter as described above. In addition, 
Kori teaches the apparatus, wherein said control module comprises a processor and a control 
program running on said processor (Kori fig. 8 No. 11). 

As per claim 38, Kori and Novak teach all the subject matter as described above. The apparatus, 
wherein said control module includes logic circuitry (Kori page 4 par. 0066, and fig. 9, and 
Novak page 10 par. [0144-0147]). The rational for combining are the same as claim 1 above. 

As per claim 39, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the apparatus, wherein said control module is license-enabled to a unique 
identification of said apparatus (Novak abstract and fig. 4 No. 412). The rational for combining 
are the same as claim 1 above. 

As per claim 40, Kori and Novak teach all the subject matter as described above. In addition, 
Kori teaches the apparatus, wherein said secure registry further stores information related to said 
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As per claim 41 , Kori and Novak teach all the subject matter as described above. In addition, 
Kori teaches the appai*atus, wherein said information related to said material includes usage 
rights included in a license for said material (Kori fig. 3 A, and page 2 par. 0034, and fig. 1 1). 

As per claims 58 and 62, Kori teaches all the subject matter as described above. 

Kori does not explicitly teach decrypting if the reference entity identification matches the entity 

identification. 

However Novak teaches the method further comprising prior to said decrypting encrypted 

material using said another key to access said material: 

receiving a sensed entity identification (Novak fig. 6 No. 409); and 

comparing a reference entity identification against said sensed entity identification 

(Novak page 10 par. 0144-0147); 

wherein said decrypting encrypted material using said another key to access said material 

comprises decrypting encrypted material using said another key to access said material only if 

said reference entity identification matches said sensed entity identification (Novak page 10 par. 

0144-0147). 

Therefore it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to employ the teachings of Novak within the system of Kori 
because it would enhance security by comparing a unique user identity or a unique serial number 
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of a device with the previously stored to verify a user or a device (Novak page 10 par, [0144- 
0147], and fig. 7). 

As per claims 59 and 63, Kori and Novak teach all the subject matter as described above. In 
addition, Novak teaches the method, wherein said reference entity identification is stored in said 
secure registry along with said another key (Novak page 7 par. 0098, and page 1 par. 0025). The 
rational for combining are the same as claim 58 above. 

As per claim 60, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the method, wherein said reference entity identification is provided by said 
replaceable software module (Novak and page 1 par. 0025). The rational for combining are the 
same as claim 58 above. 

As per claim 66, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the method, wherein said sensed entity identification is unique to a host (Novak 
page 3 par. 0049). The rational for combining are the same as claim 58 above. 

As per claim 69, Kori and Novak teach all the subject matter as described above. In addition, 
Novak teaches the method, further comprising receiving said sensed entity identification from 
information entered into an input device by said user (Novak page 7 par. 0103). The rational for 
combining are the same as claim 58 above. 
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6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Eleni A Shiferaw whose telephone number is 571-272-3867. The 
examiner can normally be reached on Mon-Fri 8:00am-5 :00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this appHcation or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status infonnation for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-21 7-9197 (toll-free). 
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